[Git][security-tracker-team/security-tracker][master] Track fixes for apache2 via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Oct 1 22:02:23 BST 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
66c67b3e by Salvatore Bonaccorso at 2026-10-01T23:01:59+02:00
Track fixes for apache2 via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -500,43 +500,43 @@ CVE-2024-58388 (Sharp (and Toshiba Tec rebranded) multifunction printers contain
 CVE-2023-54404 (Zod schema-validation library through 4.6.5 contains an uncontrolled r ...)
 	NOT-FOR-US: Zod
 CVE-2026-42356 (Deployment of wrong handler vulnerability in Apache HTTP Server allows ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42356
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/863594b37381151c397b9fbc609170d026411614
 CVE-2026-42528 (A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-42528
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/a653b98099ced413982ddad6f9416e54292f4656
 CVE-2026-46729 (NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_hear ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-46729
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/7b12a7936ec439b3e1f5fc36cfacf5b915eb652c
 CVE-2026-47360 (Exposure of Sensitive Information to an Unauthorized Actor vulnerabili ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-47360
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/cb5163f30dd0d6bc921eeac96415a381f153ac3a
 CVE-2026-48005 (Missing authentication checks in mod_auth_digest in Apache Software Fo ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-48005
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-56153 (Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_ ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56153
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/6654234dcb395e07fd62255670356f84ec733195
 CVE-2026-56154 (Use After Free vulnerability in Apache HTTP Server's mod_rewrite when  ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56154
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/6e4d1e614597109909dda495d235b6a1331d7beb
 CVE-2026-56449 (Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_ht ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-56449
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/c721d4e1cf5c142149509490015cef1a75715595
 CVE-2026-57941 (Use After Free vulnerability in Apache HTTP Server's mod_http2via shar ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-57941
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/d072ed8f06d66a30072227d61a2fc04ad9ae5c99
 CVE-2026-58415 (Internal state files accessible to external parties in mod_dav_fs in A ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-58415
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/5a00f76e12c5e1e477e902b44b42b94d9bc571ed
 CVE-2026-59685 (Out-of-bounds Write vulnerability in Apache HTTP Server on Windows whi ...)
@@ -544,39 +544,39 @@ CVE-2026-59685 (Out-of-bounds Write vulnerability in Apache HTTP Server on Windo
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59685
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/7d158df34d07b53c010ff54bfa182a76f9fab672
 CVE-2026-59797 (Improper Privilege Management vulnerability in Apache HTTP Server's mo ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-59797
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/1ee1c1fef2511454461b6770b204c4934a6495d8
 CVE-2026-63045 (Improper validation of FTP PASV reply address in mod_proxy_ftp in Apac ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63045
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/c0a3e5cbcb245022d08e490f98153f90120363ed
 CVE-2026-63292 (Stack-based buffer overflow in mod_vhost_alias in Apache Software Foun ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63292
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/7ed3f91688b7a1e1ac48486fd2e5eeb2932e879f
 CVE-2026-63686 (A NULL pointer dereference in mod_xml2enc in Apache Software Foundatio ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63686
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/6fa059e4a270e0a66dd398e96875df86abff3a75
 CVE-2026-63718 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response S ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-63718
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/7c32a06bc504875544185c27cfbc6d8dc257c941
 CVE-2026-73636 (Authentication bypass by capture-replay in mod_auth_digest in Apache S ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73636
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-73637 (Use after free in mod_auth_digest in Apache Software Foundation Apache ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-73637
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/fc722c619fdf7f8eb69eb8bd4201265065cd3ac2
 CVE-2026-79768 (Path equivalence: '/./' (single dot directory) vulnerability in Apache ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-79768
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/dce2ddbca79be74e7bcb7b8cc7a3a291cf4e9588
 CVE-2026-93546 (Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 al ...)
-	- apache2 <unfixed>
+	- apache2 2.4.69-1
 	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2026-93546
 	NOTE: Fixed by: https://github.com/apache/httpd/commit/fa8c354189597453b2c8b38e081efa9b723abd3c
 CVE-2026-102505 (Imager versions before 1.037 for Perl overflow a heap buffer fetching  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c67b3ef1ebdd97edfe0cdfba41bfd74d9f5e6b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/66c67b3ef1ebdd97edfe0cdfba41bfd74d9f5e6b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261001/d42f323f/attachment.htm>

More information about the debian-security-tracker-commits mailing list